Generic PE loader for fast prototyping evasion techniques
-
Updated
Jul 2, 2024 - C
#
sleep-obfuscation
Here are 10 public repositories matching this topic...
Crystal Palace RDLL loader for Adaptix C2 with Ekko sleep obfuscation, IAT hooking via PICO, and per-section permission restoration
-
Updated
Jun 5, 2026 - C++
A CET-compatible Windows x64 loader that produces fully backed call stacks through runtime function table manipulation, code cave injection, and inverted function table collapse.
malware-development red-team windows-x64 red-team-tools edr-bypass edr-evasion stack-spoofing sleep-obfuscation payload-loader cet-bypass
-
Updated
Sep 6, 2026 - C++
A stealthy and modular Windows loader designed to bypass modern EDR solutions using Module Stomping, Stack Duplication, and Advanced Sleep Obfuscation.
win32api malware-development red-team shellcode-loader edr-evasion module-stomping sleep-obfuscation zilean proxyapi stealth-loader
-
Updated
Jul 26, 2026 - C
Sleep obfuscation for shellcode implants and their reflective shit
-
Updated
Sep 19, 2023 - Nim
a stage1 DLL loader with sleep obfuscation
-
Updated
Dec 27, 2022 - C
Pure-Go offensive-security primitives library: syscalls, evasion (AMSI/ETW/unhook/sleepmask), injection, PE packer, credentials, post-ex, C2. MITRE ATT&CK mapped. Authorized research only.
golang packer persistence shellcode syscalls pentest offensive-security malware-development red-team bof mitre-attack process-injection windows-security defense-evasion unhooking edr-bypass byovd c2-framework sleep-obfuscation lsass-dump
-
Updated
Jul 13, 2026 - Go
CET-safe sleep mask: DEP-fault + VEH wake keeps call/ret pairs balanced
-
Updated
Oct 26, 2026 - C
Second modification of the Meterpreter 二次修改的Meterpreter Beacon
-
Updated
Nov 27, 2023 - C
NomSleep is a Windows sleep obfuscation PoC. The PE image is encrypted in place with three stacked RC4 layers while idle, restored only when a timer callback runs. works w/ NtContinue continuation records on a timer queue worker thread. XOR-obfuscated API names, per-region protection restore, avalanche-mixed keys.
-
Updated
Sep 17, 2026 - C
Add this topic to your repo
To associate your repository with the sleep-obfuscation topic, visit your repo's landing page and select "manage topics."